Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls
High severity
GitHub Reviewed
Published
May 10, 2026
in
open-webui/open-webui
•
Updated May 15, 2026
Give feedback on Dependabot alerts